IT - Links

Information Security

Pentesting

• Payloads All The Things (github list)

Mobile Pentesting

• awesome-mobile-security (github list)
• objection

iOS Pentesting

• iOS Security 101 (slides)
• iOS Pentesting - Introduction
• ATS - NSAppTransportSecurity
• lldb for iOS
• gdb and lldb command examples

Linux Security

• Linux Hardening in the Wild
• Fixing the Desktop Linux Security Model

Web Pentesting

• MDN - Cross-Origin Resource Sharing
• Stanford CS 253 Web Security

Post Exploitation

• THC’s favourite Tips, Tricks & Hacks

Hardware Security

• NSA ANT catalog
• TPM Genie
• INCEPTION (DMA attack)
• PCILeech (DMA attack)

BIOS/UEFI/Boot Security

• Defeating a Laptop’s BIOS Password

Guides

• OWASP Firmware Security Testing Methodology
• OWASP Mobile Security Testing Guide

Useful Tools

• Frida
• Ghidra
• peda
• pwntools

General IT

Debian

• Removal of jessie-updates and jessie-backports from debian mirrors
  • this article has a nice graph of how packages go through the different repositories (security, stable-updates, …)